Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft
File:                     Z1qGdu030Wq7yi_vjqofI_JXsp8.mft (raw, json)
Hash identifier:          dsk1R6Z28HnyKrAbZJBmUkJdrmUPjXJfrFUaVbOGORI=
Subject key identifier:   B5:B5:6A:10:75:23:54:02:DF:FD:1A:F4:8B:40:AB:E2:AD:83:51:CA
Authority key identifier: 67:5A:86:76:ED:37:D1:6A:BB:CA:2F:EF:8E:AA:1F:23:F2:57:B2:9F
Certificate issuer:       /CN=A91D56CA/serialNumber=675A8676ED37D16ABBCA2FEF8EAA1F23F257B29F
Certificate serial:       1787
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft
Manifest number:          1776
Signing time:             Fri 22 Nov 2024 16:35:58 +0000
Manifest this update:     Fri 22 Nov 2024 16:35:57 +0000
Manifest next update:     Fri 29 Nov 2024 16:35:57 +0000
Files and hashes:         1: Z1qGdu030Wq7yi_vjqofI_JXsp8.crl (hash: SejEV1RlgNb1Hep9F/adl8RYyTSdIavp0D5unFzXuyE=)
                          2: A6DF4CF8C34B11ECAFB25A68C4F9AE02.roa (hash: WcxbXK7pdjHqiaOm+c53LrwbHNpvehmBziJhBJ+L4+A=)
                          3: 0EE83FA4C34611EC9290F072C4F9AE02.roa (hash: ybBCNAe9ww1gC6h0hxh0XLQ0JxvVGyjFwMWuAiX5tEk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.crl
                          rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:35:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6023 (0x1787)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D56CA/serialNumber=675A8676ED37D16ABBCA2FEF8EAA1F23F257B29F
        Validity
            Not Before: Nov 22 16:35:57 2024 GMT
            Not After : Nov 29 16:35:57 2024 GMT
        Subject: CN=6740b2ed-8e45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ae:cd:51:34:b3:13:79:ce:bf:9c:d0:72:94:
                    fd:b0:b1:fd:92:dd:8e:33:ca:ce:85:71:af:77:59:
                    bc:f1:34:fd:6c:d0:9a:bd:77:7e:32:0b:2e:ae:9f:
                    c8:ae:db:ad:46:15:5b:f8:15:46:d1:1e:51:05:fb:
                    d1:90:50:1d:20:c8:b6:cb:97:22:8d:e6:c3:29:bc:
                    fe:cd:d7:1a:27:c6:c8:b9:43:4d:28:8e:e1:17:db:
                    0f:79:f1:61:64:f0:83:8f:55:37:bd:cc:a5:da:a7:
                    4e:88:28:7b:ae:da:ce:53:57:66:9a:79:68:c1:ea:
                    cf:de:6f:59:00:0d:1d:08:9a:dc:6e:98:3f:4a:f2:
                    ca:2e:c6:7e:07:9f:39:3d:45:42:05:0c:68:ab:cb:
                    94:3b:91:62:34:94:35:f0:c0:b8:72:bf:a2:55:70:
                    d1:d9:99:3c:fe:45:38:c6:ef:0d:ec:dc:f5:1c:20:
                    30:a1:5a:7f:be:91:2b:a6:3b:c0:4f:62:e7:f8:49:
                    fb:e0:10:4f:9b:26:d1:7d:ff:77:30:7a:c7:29:be:
                    ca:c8:65:bd:50:ea:cf:93:de:09:00:20:40:2d:75:
                    69:96:ef:35:64:00:ea:67:29:77:c2:65:6d:0d:a4:
                    3a:08:53:ee:e0:52:74:3d:1b:dd:85:9f:fb:0c:69:
                    ef:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B5:6A:10:75:23:54:02:DF:FD:1A:F4:8B:40:AB:E2:AD:83:51:CA
            X509v3 Authority Key Identifier:
                keyid:67:5A:86:76:ED:37:D1:6A:BB:CA:2F:EF:8E:AA:1F:23:F2:57:B2:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:c4:24:a3:93:c6:bd:4b:d4:04:64:24:80:59:ad:a4:6c:f8:
         e9:4a:c4:b6:ab:56:a3:89:56:f6:69:a4:f3:b5:00:63:34:6d:
         25:e7:ab:4c:85:24:0c:61:af:4b:03:89:16:d6:2f:8e:6b:87:
         0f:88:84:e0:8e:92:c8:41:af:0f:b6:91:03:c0:2b:3b:d7:a4:
         ac:3f:5f:e3:cb:3c:47:86:03:ac:47:74:ed:0b:cf:ea:13:4a:
         f1:8d:be:cc:26:b6:d5:57:41:63:e4:62:82:f2:38:88:e7:1b:
         35:af:9a:15:75:73:ea:19:be:70:f3:2d:75:55:9c:17:30:1e:
         35:e4:32:a3:fd:c6:99:27:d3:5c:1c:96:7f:bc:a4:58:de:07:
         36:68:75:97:70:63:64:93:96:5f:23:c7:a1:f9:c0:30:c6:9c:
         f8:92:c5:cb:df:ba:57:97:97:78:22:eb:45:1d:ba:d1:fc:5c:
         c5:39:72:02:22:18:dc:24:3c:99:5f:d0:48:27:f2:e4:ba:30:
         2f:75:3a:31:83:f9:fc:57:75:bd:5d:9a:23:c7:d3:f5:c7:fe:
         bb:3c:9a:b2:0f:fc:9e:e2:df:21:a7:dc:63:96:ef:77:12:e3:
         b3:dd:5d:6f:41:60:93:82:ce:f0:71:2a:6e:60:84:c1:33:b2:
         d0:98:d3:66
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICF4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDU2Q0ExMTAvBgNVBAUTKDY3NUE4Njc2RUQzN0QxNkFCQkNBMkZFRjhFQUExRjIz
RjI1N0IyOUYwHhcNMjQxMTIyMTYzNTU3WhcNMjQxMTI5MTYzNTU3WjAYMRYwFAYD
VQQDEw02NzQwYjJlZC04ZTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtq7NUTSzE3nOv5zQcpT9sLH9kt2OM8rOhXGvd1m88TT9bNCavXd+Mgsurp/I
rtutRhVb+BVG0R5RBfvRkFAdIMi2y5cijebDKbz+zdcaJ8bIuUNNKI7hF9sPefFh
ZPCDj1U3vcyl2qdOiCh7rtrOU1dmmnlowerP3m9ZAA0dCJrcbpg/SvLKLsZ+B585
PUVCBQxoq8uUO5FiNJQ18MC4cr+iVXDR2Zk8/kU4xu8N7Nz1HCAwoVp/vpErpjvA
T2Ln+En74BBPmybRff93MHrHKb7KyGW9UOrPk94JACBALXVplu81ZADqZyl3wmVt
DaQ6CFPu4FJ0PRvdhZ/7DGnvGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLW1ahB1
I1QC3/0a9ItAq+Ktg1HKMB8GA1UdIwQYMBaAFGdahnbtN9Fqu8ov746qHyPyV7Kf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTZDQS85MTRFNTNGNkMw
RDExMUU3OEQxRUY4MkJDNEY5QUUwMi9aMXFHZHUwMzBXcTd5aV92anFvZklfSlhz
cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1oxcUdkdTAzMFdxN3lpX3ZqcW9mSV9KWHNwOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NTZDQS85MTRFNTNGNkMwRDExMUU3OEQxRUY4MkJDNEY5QUUwMi9aMXFHZHUwMzBX
cTd5aV92anFvZklfSlhzcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCqxCSjk8a9S9QEZCSAWa2kbPjpSsS2q1ajiVb2aaTztQBjNG0l56tM
hSQMYa9LA4kW1i+Oa4cPiITgjpLIQa8PtpEDwCs716SsP1/jyzxHhgOsR3TtC8/q
E0rxjb7MJrbVV0Fj5GKC8jiI5xs1r5oVdXPqGb5w8y11VZwXMB415DKj/caZJ9Nc
HJZ/vKRY3gc2aHWXcGNkk5ZfI8eh+cAwxpz4ksXL37pXl5d4IutFHbrR/FzFOXIC
IhjcJDyZX9BIJ/LkujAvdToxg/n8V3W9XZojx9P1x/67PJqyD/ye4t8hp9xjlu93
EuOz3V1vQWCTgs7wcSpuYITBM7LQmNNm
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:50:18 2024 by rpki-client on console-ams.rpki-client.org